$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: R3sgDk4/6cV+bioBVPqRZcNg7wXwUJMjPRiWXOhK5X4= Subject key identifier: E9:B5:18:05:DE:A6:79:2B:37:54:7F:49:0B:79:F0:EF:06:98:21:E1 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 5DDE5ED61205B90B4340EE3185B8E2BB2054C0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 01DD Signing time: Sun 02 Nov 2025 12:20:44 +0000 Manifest this update: Sun 02 Nov 2025 12:15:44 +0000 Manifest next update: Wed 05 Nov 2025 14:01:44 +0000 Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: l7e04tx4Mr56W+sGrraQme0eR5MHoJterHz1neaHXyk=) 2: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: yMg6HVwY0srOr9qYjSgSAxHfYp7Et0PTHUKtuNVYQ4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:de:5e:d6:12:05:b9:0b:43:40:ee:31:85:b8:e2:bb:20:54:c0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Nov 2 12:15:44 2025 GMT Not After : Nov 5 14:01:44 2025 GMT Subject: CN=E9B51805DEA6792B37547F490B79F0EF069821E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:3d:5a:58:26:ff:3d:9a:07:80:e5:b1:23: eb:ec:42:f4:ab:e2:84:fa:5d:e3:a2:c9:00:9a:ef: 7c:7b:c9:d3:a9:3b:1a:76:cb:1f:21:ba:6a:71:6c: b4:35:48:21:73:ee:3c:bd:73:3b:8b:75:d2:d9:17: 74:d0:3d:b8:0c:2d:ac:11:3a:f5:59:f4:f2:89:6a: 2e:d0:a7:d0:89:95:11:2a:66:b1:18:ba:75:4f:39: 57:b3:57:c0:21:7f:c0:d2:c1:d3:d8:93:90:8f:b4: c8:1d:6d:fe:92:8a:c8:04:b2:b0:34:48:35:1c:81: 27:d4:d9:94:06:16:bb:cc:f1:74:bf:ba:5c:4b:65: 53:e4:a6:ba:41:e3:6b:5f:74:18:ab:59:59:da:e1: 1b:1c:8b:a6:b9:60:ff:96:d8:dc:ba:57:74:d3:d4: 88:92:de:86:95:9c:6d:d5:f2:51:6f:11:ef:c3:32: c8:53:53:96:07:09:be:6d:78:27:92:c0:7f:ab:1d: 44:06:e8:5c:28:cf:7a:29:5e:ea:db:cd:2d:a7:96: 8e:08:2d:7b:e5:c6:df:e3:c5:02:49:f1:c2:d0:07: 18:12:d5:4d:fd:f4:4b:cf:52:57:a8:35:6c:eb:a2: cc:62:3c:eb:5a:9b:17:c9:ec:69:93:fc:0a:68:c7: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:18:05:DE:A6:79:2B:37:54:7F:49:0B:79:F0:EF:06:98:21:E1 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:34:b8:23:8b:52:38:85:c8:00:58:d7:1c:24:c9:a8:ee: 64:1b:29:87:0a:e9:0f:58:64:95:1e:f6:88:53:f3:cd:dd:f1: 8a:42:7c:a7:23:5f:1d:58:8c:0d:6e:b0:bc:52:12:33:c2:09: cf:3b:62:68:6e:f4:dc:be:61:2c:f9:ff:61:03:48:6f:92:2c: de:bc:a7:55:78:a6:98:6e:90:f8:8f:ac:49:d0:54:24:ce:39: c6:56:23:28:d3:69:ef:fd:b2:88:6d:4a:db:1c:33:05:21:81: cc:9f:4b:3b:53:3e:3f:cf:19:66:b9:fb:4d:0e:da:e3:ac:3f: 26:17:e9:01:b2:cd:5e:2e:63:86:4e:26:b8:3f:b3:c7:96:cb: 3c:1d:bf:ac:92:fd:73:96:80:d6:71:d6:11:3d:8e:bd:c9:2b: 16:7f:d8:f1:93:02:ae:05:37:af:6a:f7:9a:7d:c0:b5:36:18: 58:01:ab:b3:7a:e1:d6:1e:ba:57:c6:94:32:93:c1:8b:cc:1f: e8:15:46:b3:fb:e3:32:7a:7c:e4:28:69:cf:4b:90:80:4d:26: 1c:b1:17:82:7b:4b:78:ef:22:fd:75:fe:59:fc:f6:33:e0:06: 0b:76:9f:69:4a:0e:04:3c:31:68:c9:f7:02:42:9f:fa:bc:fe: fe:28:85:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXd5e1hIFuQtDQO4xhbjiuyBUwLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTExMDIxMjE1NDRaFw0yNTExMDUxNDAxNDRaMDMxMTAvBgNV BAMTKEU5QjUxODA1REVBNjc5MkIzNzU0N0Y0OTBCNzlGMEVGMDY5ODIxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKD1aWCb/PZoHgOWxI+vsQvSr 4oT6XeOiyQCa73x7ydOpOxp2yx8humpxbLQ1SCFz7jy9czuLddLZF3TQPbgMLawR OvVZ9PKJai7Qp9CJlREqZrEYunVPOVezV8Ahf8DSwdPYk5CPtMgdbf6SisgEsrA0 SDUcgSfU2ZQGFrvM8XS/ulxLZVPkprpB42tfdBirWVna4Rsci6a5YP+W2Ny6V3TT 1IiS3oaVnG3V8lFvEe/DMshTU5YHCb5teCeSwH+rHUQG6Fwoz3opXurbzS2nlo4I LXvlxt/jxQJJ8cLQBxgS1U399EvPUleoNWzrosxiPOtamxfJ7GmT/Apox+xdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bUYBd6meSs3VH9JC3nw7waYIeEwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJobNLgji1I4hcgAWNccJMmo7mQbKYcK6Q9Y ZJUe9ohT883d8YpCfKcjXx1YjA1usLxSEjPCCc87Ymhu9Ny+YSz5/2EDSG+SLN68 p1V4pphukPiPrEnQVCTOOcZWIyjTae/9sohtStscMwUhgcyfSztTPj/PGWa5+00O 2uOsPyYX6QGyzV4uY4ZOJrg/s8eWyzwdv6yS/XOWgNZx1hE9jr3JKxZ/2PGTAq4F N69q95p9wLU2GFgBq7N64dYeulfGlDKTwYvMH+gVRrP74zJ6fOQoac9LkIBNJhyx F4J7S3jvIv11/ln89jPgBgt2n2lKDgQ8MWjJ9wJCn/q8/v4ohRI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:35 2025 by rpki-client